CVE-2023-3897

CVE-2023-3897 通过绕过CAPTCHA，在Windows部署的本地SureMDM解决方案中可以实现用户名枚举，攻击者可以通过错误消息枚举本地用户信息。 该问题影响SureMDM本地版：6.31及以下版本 https://nvd.nist.gov/vuln/detail/CVE-2023-3897 https://www.42gears.com/trust-center/information-security/security-advisories/42g-2023-003/ https://www.exploit-db.com/exploits/51804...

Microsoft-Defender-for-Endpoint-Deployment-on-Windows-10-11-device

本仓库记录了如何在 Windows 11 设备上部署 Microsoft Defender for Endpoint，包括通过本地脚本载入、启用设备发现、配置 Log4j2 检测 CVE-2021-44228 以及验证事件响应工作流。 主要功能 ✅ 适用于 Windows 10/11 的本地脚本载入 🔍 标准设备发现设置 🧨 Log4j2 漏洞检测 📈 警报验证与事件响应 📋 使用 Defender 工具进行修复的工作流 项目目标 ✔️ 在 Windows 10/11 环境中部署 Microsoft Defender for Endpoint。 ✔️ 配置设备发现和威胁检测功能。 ✔️ 启用...

CVE-2026-72957

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...

CVE-2026-72954

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

CVE-2026-72943

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

CVE-2026-69607

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69607

CVE-2026-69607 is a use-after-free vulnerability in Windows Deployment Services (WDS) that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) , with a network attack vector, high complexity, no privileges required, and user interactio...

EUVD-2026-73708

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

CVE-2026-72954

CVE-2026-72954 is a use-after-free vulnerability in Windows Deployment Services (Microsoft) that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) with vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high attack...

EUVD-2026-73674

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

EUVD-2026-73671

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...

CVE-2026-72957

CVE-2026-72957 is a heap-based buffer overflow in Windows Deployment Services that allows an authorized attacker to achieve local code execution. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a low-privilege local attacker requires ...

CVE-2026-72943

A use after free vulnerability in Windows Deployment Services allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS v3.1 score is 7.5 (HIGH) with vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high attack complexity but high impact on con...

EUVD-2026-73112

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

CVE-2026-74239

XenForo before 2.3.13 contains a path traversal vulnerability in the style archive importer on Windows deployments that allows authenticated non-super administrators with style permissions to write arbitrary files outside the intended extraction directory by using backslash-based traversal...

Windows Deployment Services Remote Code Execution Vulnerability

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

Windows Deployment Services Remote Code Execution Vulnerability

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

Windows Deployment Services Remote Code Execution Vulnerability

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

Windows Deployment Services Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...

CVE-2026-40145

A vulnerability exists in the interaction between a Endpoint Privilege Management Windows Deployment support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended...